Overview

overview

5

Static

static

5

ttk.exe

windows7-x64

5

ttk.exe

windows10-2004-x64

5

绿盟.url

windows7-x64

1

绿盟.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2fb54b9d156cd9a92ea315b53ac334d7_JaffaCakes118

  • Size

    377KB

  • MD5

    2fb54b9d156cd9a92ea315b53ac334d7

  • SHA1

    b9f203ae12b401a5cb4f46d427a697aeb5a63966

  • SHA256

    1d66778a3ec1fcfd843f473114b5de5fb10d5886379c9308f8f7276faf9b4972

  • SHA512

    3c9642d1d10f35cda1aed75ee7b46b2979a1f85c28195c54fe8e9244248d9bd167dc58c93e58bff71e43e2122364fa5dee0d7c097597697de9e386e4b36873c8

  • SSDEEP

    6144:s2wPdywXDIaWonWhTDPruasmhKQG2MEFzQjFgKkdmGgloT7Ww9zsl097VCT+Q6Hz:s2sdHDIaWo6Um4QlDCjF/l87Ww9o4nQs

Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2fb54b9d156cd9a92ea315b53ac334d7_JaffaCakes118
    .rar
  • config.ini
  • ttk.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe .js windows:4 windows x86 arch:x86 polyglot


    Headers

    Sections

  • 绿盟.url